cyberark / conjur-oss-helm-chart

Helm chart for deploying Conjur OSS to Kubernetes
Apache License 2.0
28 stars 24 forks source link

Add option to auto-create a Conjur data encryption key #136

Open diverdane opened 3 years ago

diverdane commented 3 years ago

Is your feature request related to a problem? Please describe.

Currently, dataKey is a required chart value. Users are recommended to run the following for manually creating a data encryption key:

```
DATA_KEY="$(docker run --rm cyberark/conjur data-key generate)"
```

and then this value should be configured either in a custom values.yaml file, or with the following helm install ... command line flag:

--set dataKey="$DATA_KEY"

It should be possible to add a chart value to enable the auto-creation of the Conjur data encryption key. The value might looks something like this:

database:
    autoGenerateDataKey: false

For implementing this feature, it may be possible to add the auto-generation logic into the conjur-oss/templates/_helpers.tpl template file.

When this feature is implemented, a deprecation notice must be added to the conjur-oss/templates/NOTES.txt if the auto-generation of the encryption key is expected to become the default for the next major release.

Describe the solution you would like

Describe alternatives you have considered

None.

Additional context